CVE-2024-41704

Summary

CVE-2024-41704 is a vulnerability affecting LibreChat up to version 0.7.4-rc1. This issue arises from a failure to validate normalized pathnames of images, allowing an attacker to potentially manipulate or upload malicious files. The vulnerability has initiated a fix in PR 3363, with work ongoing to release a remedied version.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.